Explore Sembi IQ - The AI engine powering the next generation of intelligent quality

AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: DevSecOps

Recent Posts

Vulnerability Remediation in Action: Frameworks, Prioritization, and Tools

As digital threats become more frequent and sophisticated, cybersecurity teams must focus on vulnerability remediation more than ever. Vulnerability remediation is a crucial step in the vulnerability management process. If vulnerabilities are not remedied, th...

DevSecOps Risk Management

Software Security Vulnerabilities Developers Need to Know About

As everyone involved in software development knows, code must be both functional and secure. Too often, software security vulnerabilities hide behind perfectly working features, turning seemingly stable applications into ticking time bombs. When overlooked, t...

Software Security Vulnerabilities Developers Need to Know blog image

Vulnerability Scanning vs Penetration Testing: Key Differences

There are two critical processes that help ensure your applications are well protected against malicious actors: vulnerability scanning and penetration testing. While both concepts aim to secure a particular aspect of the network or your application, they ser...

DevSecOps Risk Management Software Testing

Vulnerability Scanning vs Penetration Testing blog image redo

Common Security Issues: Types of Vulnerabilities, Metrics and Best Practices

With every crime committed, a detective can trace its origins back to the perpetrator. The same can be done with cybersecurity breaches. Most software vulnerabilities or major security threats can be traced back to the software development lifecycle. A simple...

DevSecOps Industry AppSec Risk Management

How to Maintain Software Supply Chain Security

Software supply chain security has never been more important. As dev teams increasingly rely on third-party components, open-source libraries, and external vendors, attackers evolve their methods to exploit weaknesses in the software supply chain. Techniques ...

DevSecOps Kiuwan Software Testing

How to maintain software supply chain security blog image

How to Detect Vulnerabilities in a Fully Managed Cloud Service

As application development evolves, and the use of artificial intelligence (AI) for chatbots and other purposes grows, more companies are moving to cloud-based services. While they are beneficial, these environments are also more prone to cybersecurity vulner...

DevSecOps Risk Management

How to Detect Vulnerabilities in a Fully Managed Cloud Service blog image

Top 5 Best Practices for Preventing SQL Injection Attacks

SQL injection (SQLi) is one of the oldest and most dangerous security vulnerabilities, enabling attackers to manipulate database queries, steal sensitive data, or even take full control of a system. That’s why many devs are wondering how to stop SQL injection...

DevSecOps Industry AppSec Risk Management

op 5 Best Practices for Preventing SQL Injection Attacks blog image

Kiuwan 2024 Year in Review and What’s Ahead in 2025

2024 was a pivotal year for the security world. From high-profile breaches (CrowdStrike, anyone?) to new opportunities in securing applications, it was a time of both challenges and transformation. Most significant for us at Kiuwan were the feedback and sugge...

DevSecOps Kiuwan Press Release

Kiuwan's Year in Review for 2024 blog image

Data Privacy Week Awareness: Why It All Begins With Your Code

Data Privacy Week is an international initiative designed to raise awareness among individuals, developers, security professionals, and businesses about the importance of online privacy and data protection. It grew from Data Privacy Day, first established in ...

DevSecOps Risk Management

How to Prevent Software Vulnerabilities

Understanding common software vulnerabilities and how to prevent them is crucial for developers, testers, and project managers. That’s why we’re going to go through several types of software vulnerabilities, including buffer overflow, code injection, cross-si...

DevSecOps Kiuwan Risk Management

7 Reasons Why DevOps Is Important for Business

In the early days of software development, frameworks were often linear, and separating development from operations made sense. Projects had distinct phases and requirements, with security usually bolted on at the end. However, as the pace of development acce...

DevSecOps Kiuwan

7 Reasons Why DevOps Is Important for Business

Safely Using Third-Party Code in Applications

Third-party code is invaluable for helping applications function, but it can also be vulnerable to attacks. Learn how to use it safely and protect your app.

DevSecOps Programming Language